Thanks Raphaël Hertzog for the report and help on the patch, and Tim Graham for the review.
…-qualified package names.
* Converted the ``libraries`` and ``builtins`` globals of ``django.template.base`` into properties of the Engine class. * Added a public API for explicit registration of libraries and builtins.
This is a security fix; disclosure to follow shortly. Thanks Sam Cooke for the report and draft patch.
Thanks to Tim and Anssi for the review.
Avoided split_exclude() for Q when used as an expression.
…ram. This was broken in c2bc1ce (refs #23763).